Skip to content

Team scope authorization bypass when Post/Put request with :team_name in body, allows HTTP parameter pollution

Moderate severity GitHub Reviewed Published Oct 19, 2022 in concourse/concourse • Updated May 1, 2023

No open alerts for this advisory

Give feedback on Dependabot alerts